$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1b82921e-6a27-38d4-b5a5-e15f8dea8e52.roa File: 1b82921e-6a27-38d4-b5a5-e15f8dea8e52.roa (raw, json) Hash identifier: ThIdNpAYAg6gOKFKZ0SOvSBGgIquDYLc07+067rYgbs= Subject key identifier: 89:79:5D:1E:FC:80:E9:62:56:77:2D:13:C1:90:40:95:66:E0:BD:44 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A9E964597553A5F8866C68700 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1b82921e-6a27-38d4-b5a5-e15f8dea8e52.roa Signing time: Thu 24 Jul 2025 01:00:50 +0000 ROA not before: Thu 24 Jul 2025 01:00:50 +0000 ROA not after: Wed 22 Oct 2025 01:00:50 +0000 asID: 397208 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:96:45:97:55:3a:5f:88:66:c6:87:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 24 01:00:50 2025 GMT Not After : Oct 22 01:00:50 2025 GMT Subject: CN=d2c8ab28-0b0d-481f-801b-670071f456b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:0b:35:46:20:78:93:31:87:a9:d8:d2:79:5e: f8:4d:eb:85:26:26:01:23:c2:49:3b:e2:e0:db:e2: 78:56:47:63:dc:82:ee:26:c7:f4:2a:fc:35:c2:7d: 65:0b:c3:d7:21:2f:83:7f:1b:f2:82:b6:f1:c2:99: dd:99:ec:fb:87:5c:b3:c9:2b:6e:1c:de:69:1e:bd: 78:37:04:11:21:f1:76:ef:26:a1:ef:3f:51:45:26: de:49:c9:d8:0b:7b:37:6e:8c:41:fd:5a:15:3e:76: e8:45:ea:df:35:0a:07:c6:22:54:15:79:e4:a4:4e: 50:38:0a:62:f6:d0:74:e9:90:c8:b8:f2:d0:3c:48: f7:45:a8:d8:bc:44:70:60:73:c7:a3:e9:14:d4:44: 95:1f:ec:2c:43:4a:f2:46:ae:f4:48:e4:7e:d1:f1: e9:2a:ae:16:41:d1:2d:eb:0c:85:c2:4b:b8:25:e4: a6:ee:8f:c1:cc:ef:d7:94:a1:40:4b:fd:ae:d8:7f: fd:ac:46:34:d4:cc:c2:03:6e:0a:39:c6:d1:2a:a5: 24:5f:c7:fe:ba:b8:fe:1b:f3:3f:d1:73:07:2a:47: 47:cc:ea:26:41:68:e9:5e:dc:66:97:c1:cb:08:cd: 57:c0:01:a5:22:5f:69:88:99:27:d6:d8:d2:fc:85: 28:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:79:5D:1E:FC:80:E9:62:56:77:2D:13:C1:90:40:95:66:E0:BD:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1b82921e-6a27-38d4-b5a5-e15f8dea8e52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:ac:52:b1:c8:4f:a2:41:9a:57:46:b2:a5:15:4b:ee:57:a0: e2:e6:b8:17:6f:cd:5a:c5:f6:d6:bf:2a:5b:a8:d9:f2:0a:45: 8f:3b:a8:a0:a7:1d:76:2b:09:9f:44:f2:74:77:1d:70:89:67: d8:cb:f5:ac:ee:fb:4e:4c:9d:78:c1:ca:02:36:f6:46:16:eb: 48:5b:71:10:1f:d1:f1:a9:2b:dc:16:20:01:a2:60:5e:13:cd: 8d:22:35:1f:82:51:9f:0b:f3:b1:bb:57:54:10:a4:7d:69:b1: 56:98:71:88:fd:97:b4:b9:8a:f5:aa:5d:f7:06:be:01:0d:5d: 9b:ff:75:b7:28:dd:8d:ce:c5:12:41:02:7f:33:8e:4f:9f:ac: 08:45:2b:8f:1f:ad:10:3e:c5:7f:06:65:91:4a:e1:7c:bd:c9: 9d:f1:3d:91:ca:0f:33:71:5a:a0:1a:75:4e:73:1a:a8:60:c5: bb:a6:e7:b1:a3:fb:9a:63:a9:55:2d:71:47:03:e2:5c:62:36: 9b:eb:06:b3:bc:1e:82:d3:f7:6b:91:78:73:31:fa:94:9a:37: c5:ab:34:f9:b4:57:2a:91:38:73:60:29:87:af:20:bf:06:e0: 36:58:45:76:9b:a6:55:50:35:b7:50:d3:1e:58:b3:d7:f8:da: 88:ca:94:90 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqelkWXVTpfiGbGhwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk ZDJjOGFiMjgtMGIwZC00ODFmLTgwMWItNjcwMDcxZjQ1NmIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlws1RiB4kzGHqdjSeV74TeuFJiYBI8JJO+Lg 2+J4Vkdj3ILuJsf0Kvw1wn1lC8PXIS+Dfxvygrbxwpndmez7h1yzyStuHN5pHr14 NwQRIfF27yah7z9RRSbeScnYC3s3boxB/VoVPnboRerfNQoHxiJUFXnkpE5QOApi 9tB06ZDIuPLQPEj3RajYvERwYHPHo+kU1ESVH+wsQ0ryRq70SOR+0fHpKq4WQdEt 6wyFwku4JeSm7o/BzO/XlKFAS/2u2H/9rEY01MzCA24KOcbRKqUkX8f+urj+G/M/ 0XMHKkdHzOomQWjpXtxml8HLCM1XwAGlIl9piJkn1tjS/IUouwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIl5XR78gOliVnctE8GQQJVm4L1EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMWI4MjkyMWUtNmEyNy0z OGQ0LWI1YTUtZTE1ZjhkZWE4ZTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBZrFKxyE+iQZpXRrKlFUvuV6Di5rgXb81axfbWvypbqNnyCkWPO6ig px12KwmfRPJ0dx1wiWfYy/Ws7vtOTJ14wcoCNvZGFutIW3EQH9HxqSvcFiABomBe E82NIjUfglGfC/Oxu1dUEKR9abFWmHGI/Ze0uYr1ql33Br4BDV2b/3W3KN2NzsUS QQJ/M45Pn6wIRSuPH60QPsV/BmWRSuF8vcmd8T2Ryg8zcVqgGnVOcxqoYMW7puex o/uaY6lVLXFHA+JcYjab6wazvB6C0/drkXhzMfqUmjfFqzT5tFcqkThzYCmHryC/ BuA2WEV2m6ZVUDW3UNMeWLPX+NqIypSQ -----END CERTIFICATE-----Generated at Mon Aug 4 22:16:10 2025 by rpki-client